// SCAN REPORT

Now Sdk Ext

86 tools. 38 can modify or destroy data without limits.

2 destructive tools with no built-in limits. Policy required.

Last updated:

38 can modify or destroy data
48 read-only
86 tools total

Community server · catalogue entry verified 12/06/2026

How to control Now Sdk Ext ↓

TOOL MAP

What Now Sdk Ext exposes to your agents

Read (48) Write / Execute (36) Destructive / Financial (2)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Now Sdk Ext tools

Destructive · High cancel_flow Cancelling a flow execution is an irreversible action — a cancelled flow cannot be resumed or restarted from the same point. Destructive · Critical query_delete_records This tool performs bulk deletion of all records matching a query. Execute · High aggregate_grouped Although aggregate_grouped primarily retrieves summarized data (which would be Read), it falls into Execute because it actively runs query functions on a live system. Execute · High execute_action This tool runs or triggers external operations (Flow Designer actions) whose effects depend on the action being invoked.

38 of Now Sdk Ext's 86 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Now Sdk Ext

PolicyLayer is an MCP gateway — it sits between your AI agents and Now Sdk Ext, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "cancel_flow": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "query_update_records": {
    "limits": [
      {
        "counter": "query_update_records_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "aggregate_query": {
    "limits": [
      {
        "counter": "aggregate_query_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Now Sdk Ext — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON NOW SDK EXT →

Free to start. No card required.

FULL CATALOGUE

All 86 Now Sdk Ext tools

DESTRUCTIVE 2 tools
Destructive cancel_flow Cancel a running or paused flow execution by its context ID. Destructive query_delete_records Find records matching an encoded query and delete them all.
EXECUTE 9 tools
Execute aggregate_grouped Run aggregate functions (COUNT, AVG, MIN, MAX, SUM) grouped by a field on any Execute execute_action Execute a ServiceNow Flow Designer action by scoped name. Execute execute_flow Execute a published ServiceNow Flow Designer flow by scoped name. Execute execute_script Execute JavaScript on a ServiceNow instance using Scripts - Background Execute execute_subflow Execute a ServiceNow Flow Designer subflow by scoped name. Execute run_atf_test Execute a single ServiceNow ATF (Automated Test Framework) test by its sys_id. Execute run_atf_test_suite Execute a ServiceNow ATF test suite and wait for all tests to complete. Execute test_flow Test a ServiceNow Flow Designer flow without requiring it to be published. Execute install_store_app Install a ServiceNow store application on the target instance.
WRITE 27 tools
Write query_update_records Find records matching an encoded query and update them all with the specified data. Write add_code_search_table Add a new table to an existing code search group, expanding what gets searched. Write add_task_comment Add a comment or work note to any task-based record (incident, change_request, Write approve_change Approve a change request with optional comments. Sets the approval field to Write assign_task Assign a task record to a user and optionally an assignment group. Write batch_create_records Create multiple records across one or more ServiceNow tables in a single batch. Write batch_update_records Update multiple records across one or more ServiceNow tables in a single batch. Write clone_update_set Clone an existing update set by creating a new one and copying all its records. Write close_incident Close an incident by setting state to Closed (7). Write copy_flow Copy an existing ServiceNow Flow Designer flow into a target scoped application. Write create_kb_article Create a new knowledge article in a specified knowledge base. The article is Write create_kb_category Create a new category in a knowledge base. Requires a label and the knowledge Write create_update_set Create a new update set. IMPORTANT: This creates a new update set on the instance. Write create_workflow Create a complete ServiceNow workflow from a single specification. Write import_records_xml Import XML records into a ServiceNow instance via the sys_upload.do processor. Write install_from_app_repo Install an application from the company Write move_update_set_records Move records from one update set to another. You can move specific records Write publish_kb_article Publish a draft knowledge article by setting its workflow_state to Write publish_to_app_repo Publish an application to the company Write push_script Push a local script file to a ServiceNow instance, updating the script Write resolve_incident Resolve an incident by setting state to Resolved (6) with resolution notes. Write set_current_scope Change the active application scope. Validates the app exists, records Write set_current_update_set Set the active update set for the session. All changes will be captured in this update set. Write submit_catalog_request Submit a service catalog request using the ServiceNow order_now API. Returns Write update_kb_article Update an existing knowledge article Write update_store_app Update an installed ServiceNow store application to a newer version. Write upload_attachment Upload a file attachment to a ServiceNow record. The file content must be
READ 48 tools
Read aggregate_query Run aggregate functions (COUNT, AVG, MIN, MAX, SUM) on any ServiceNow table Read check_instance_health Run a consolidated health check on a ServiceNow instance. Returns version info, Read code_search Search for code across a ServiceNow instance using the Code Search API. Read count_records Count records on any ServiceNow table, optionally filtered by an encoded query. Read discover_table_schema Discover the full schema of a ServiceNow table including all fields, types, Read explain_field Get detailed explanation of a specific field on a ServiceNow table, Read find_atf_tests Search for ATF (Automated Test Framework) tests on a ServiceNow instance. Read find_task Find a task record by its number (e.g., \ Read get_app_details Get detailed information about a ServiceNow application by its sys_id. Read get_attachment_info Get metadata for a specific attachment by its sys_id. Returns file name, Read get_catalog_category Get details of a specific service catalog category by sys_id, including the Read get_catalog_item Get details of a specific service catalog item by sys_id, optionally including Read get_cmdb_relationships Get direct relationships of a CMDB Configuration Item (CI). Returns upstream, Read get_current_scope Get the currently active application scope on the ServiceNow instance. Read get_current_update_set Get the currently active update set for the session. Read get_flow_context_status Query the current status of a flow execution by its context ID. Read get_flow_error Retrieve the error message from a failed flow execution by its context ID. Read get_flow_execution_details Get rich execution details for a flow context: per-action timing, inputs, Read get_flow_logs Retrieve flow execution log entries from sys_flow_log for a given context.\n\n Read get_flow_outputs Retrieve outputs from a completed flow/subflow/action execution by its Read get_kb_article Get the full content of a knowledge article by sys_id, including the HTML body text. Read get_knowledge_base Get details of a specific knowledge base by sys_id, including the total number Read inspect_update_set Inspect an update set Read list_attachments List file attachments on a ServiceNow record. Returns metadata for each Read list_catalog_categories List service catalog categories from the sc_category table. Filter by parent Read list_catalog_item_variables List the variables (form fields) for a specific catalog item. Returns variable Read list_catalog_items List service catalog items from the sc_cat_item table. Supports text search Read list_code_search_groups List available code search groups on a ServiceNow instance. Read list_code_search_tables List the tables associated with a code search group. These are the tables Read list_company_apps List company-internal applications shared within your organization. Read list_instance_tables List tables on a ServiceNow instance with optional filtering. Returns table name, Read list_kb_articles List knowledge article summaries from the kb_knowledge table. Returns lightweight Read list_kb_categories List knowledge base categories from the kb_category table. Filter by knowledge Read list_knowledge_bases List knowledge bases on a ServiceNow instance. Returns knowledge base records Read list_plugins List ServiceNow platform plugins on an instance. Returns plugin ID, name, Read list_scoped_apps List scoped applications (sys_app records) on the instance with optional filtering. Read list_update_sets List update sets on the instance with optional filtering. Read lookup_app Search for ServiceNow applications (scoped apps) and platform plugins by name, Read lookup_columns List or search columns (fields) on a ServiceNow table. Queries the sys_dictionary Read lookup_table Search for ServiceNow tables by name or label. Queries the sys_db_object table Read pull_script Pull a script (Script Include, Business Rule, UI Script, UI Action, Read query_syslog Query the ServiceNow system log (syslog) to check for errors, warnings, Read query_table Query any ServiceNow table using the Table API. Returns records matching Read search_store_apps Search or browse ServiceNow store applications by category.\n\n Read traverse_cmdb_graph Traverse the CMDB relationship graph starting from a Configuration Item using Read validate_app_install Validate whether a set of applications are installed at the expected versions. Read validate_catalog Validate a catalog item Read export_record_xml Export a single record from a ServiceNow instance in unload XML format.
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Sperax Ecosystem Crypto & DeFI MCP Server 1318 tools
adminautomation
Mcp Afip 1300 tools
adminautomation
Mcp Ap2 1300 tools
adminautomation
BNB Chain MCP 1240 tools
adminautomation
Nodebench 824 tools
adminautomation
Amazon Bedrock Knowledge Base Retrieval MCP Server 805 tools
adminautomation
Amazon Data Processing MCP Server 805 tools
adminautomation
Amazon ECS MCP Server 805 tools
adminautomation
FAQ

Questions about Now Sdk Ext

Can an AI agent delete data through the Now Sdk Ext MCP server? +

Yes. The Now Sdk Ext server exposes 2 destructive tools including cancel_flow, query_delete_records. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Now Sdk Ext? +

The Now Sdk Ext server has 27 write tools including query_update_records, add_code_search_table, add_task_comment. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Now Sdk Ext.

How many tools does the Now Sdk Ext MCP server expose? +

86 tools across 4 categories: Destructive, Execute, Read, Write. 48 are read-only. 38 can modify, create, or delete data.

How do I enforce a policy on Now Sdk Ext? +

Register the Now Sdk Ext MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Now Sdk Ext tool call.

Deterministic rules across all 86 Now Sdk Ext tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON NOW SDK EXT →

Free to start. No card required.

86 Now Sdk Ext tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.